Security & Privacy

Your inbox is personal,
we treat it that way.

Clafk is designed to help you manage email efficiently, while keeping your data private and under your control.

Start for free Book a demo
How we earn your trust

Five principles.

01

Your data stays yours.

  • Clafk does not use customer data to train its own models
  • Your data is processed only as needed to provide, secure, and operate the Service for you
  • We do not sell your personal data. We share data only with the service providers and other parties described in our Privacy Policy
02

Secure by default.

  • Encrypted in transit. Clafk uses TLS-protected connections with the services it integrates with.
  • Customer-facing browser sessions cannot directly read stored messages, drafts, or mailbox tokens. These are handled through server-side systems.
  • Each customer’s data is separated using database-level access controls.
03

You stay in control.

  • Clafk does not send emails on its own
  • You review and approve everything before sending
  • You can disconnect your account at any time
04

Minimal access, only what's needed.

  • We request the mailbox permissions Clafk needs to read, label, and prepare drafts.
  • Clafk reads, labels, and prepares drafts. It does not send or delete emails on your behalf.
  • Clafk does not manually review customer emails as part of normal operation. Limited access may occur only when necessary for operational support or security purposes and is restricted to authorised personnel.
05

Privacy-first by design.

  • Clafk supports GDPR data-subject requests and uses appropriate safeguards for international data transfers.
  • Some service providers may process data outside the EEA, including in the United States. Where required, these transfers are protected using Standard Contractual Clauses.
  • You can request data deletion at any time
  • We aim to collect only what is necessary
AI & model handling

The part everyone asks about:
does the AI keep our data?

Complete inbound email bodies are not permanently stored. Limited message excerpts and generated drafts may be stored while the account is active.

01 · Model training

Clafk does not train its own
models on your email.

Clafk does not use customer data to train its own models. LLM providers process data under their applicable business and API terms.

✓Clafk does not train its own models on your data
02 · Drafts only

Used to prepare
your reply.

Your email is read so Clafk can prepare a draft for you, in your voice. Only the sender, subject line, and a limited excerpt of the message are sent for classification and draft generation. Complete inbound email bodies are not sent to LLM providers. Email attachments are not retrieved or stored. Beyond that, your data is processed only as needed to provide, secure, and operate the Service.

✓Your personal data is not sold
03 · You stay in charge

Nothing is sent
without your approval.

Clafk does not send on its own. You review every draft before it goes out, and you can disconnect your account at any time.

✓You approve every send
Input
Your email
Clafk
Draft · in your voice
Output
You approve
Built for trust

A safe, reliable experience,
without unnecessary complexity.

Clafk is continuously improving its security practices as we grow. If you have a question, want a copy of our DPA, or need to report something, we're one email away.

Security & privacy: security@clafk.com
DPA · data processing agreement available for business customers — request a copy. Read our Privacy Policy.